$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS143057.roa File: AS143057.roa (raw, json) Hash identifier: RxaH1oghHn/J/prqdbxJB3Bngge/fVf8GOCBglKM2rQ= Subject key identifier: 7B:E5:27:18:C4:AA:57:4E:39:E1:53:CA:3A:97:43:B9:69:D9:0B:F9 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 73AFFDDDF71DE12E15ED9B02296862C8A338AD4A Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS143057.roa Signing time: Wed 04 Mar 2026 06:07:51 +0000 ROA not before: Wed 04 Mar 2026 06:02:51 +0000 ROA not after: Wed 03 Mar 2027 06:07:51 +0000 asID: 143057 IP address blocks: 240a:a197::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:af:fd:dd:f7:1d:e1:2e:15:ed:9b:02:29:68:62:c8:a3:38:ad:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:02:51 2026 GMT Not After : Mar 3 06:07:51 2027 GMT Subject: CN=7BE52718C4AA574E39E153CA3A9743B969D90BF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:46:74:2a:8c:98:72:e9:11:49:38:36:6f:e2: 3a:bc:fb:ee:22:10:78:d3:58:89:ad:8a:40:23:a8: f2:89:98:f2:eb:00:53:44:d1:66:fe:c5:33:36:2a: 55:e1:23:70:39:b8:49:49:bf:05:99:b7:72:ee:ee: 6e:3f:f7:8d:ac:3e:4d:55:3f:08:6d:82:41:cf:ca: 5a:8b:da:3f:60:73:bb:55:10:48:04:bf:05:c5:3f: 43:75:b1:61:18:4b:3e:ad:49:46:4b:da:f6:23:90: c0:0a:a3:4c:53:01:b7:ac:85:dd:e5:74:ae:71:ef: ff:f2:2f:b6:42:dd:45:18:b2:09:30:bf:06:35:12: 62:a5:b8:26:53:d3:8c:d5:64:81:d9:c1:d0:15:10: 35:d9:9e:64:fb:46:35:8d:7e:38:77:fc:75:c1:8f: f8:fd:96:65:bc:2c:0b:f0:fd:bb:78:07:e7:fe:4d: fb:26:19:0c:91:cb:4a:4c:22:b9:de:4d:35:d5:67: 96:3e:5f:e3:7e:03:4f:1e:4f:e5:2a:60:c8:76:ad: 7c:5b:14:2a:23:53:b6:e1:3a:d1:5c:5d:86:34:bf: de:b9:ac:96:07:32:e1:47:97:08:e7:83:f9:c3:ec: 5d:c8:27:44:da:63:c1:0f:0a:12:b5:eb:b2:6c:49: 93:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:E5:27:18:C4:AA:57:4E:39:E1:53:CA:3A:97:43:B9:69:D9:0B:F9 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS143057.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a197::/32 Signature Algorithm: sha256WithRSAEncryption 59:37:99:6d:20:88:0d:f4:c2:53:a5:3d:bf:f6:02:f7:fa:3f: 4c:aa:11:9a:41:e4:89:cd:39:79:a4:9c:70:85:91:9a:3e:8e: 3a:c5:ef:0c:26:10:4a:ca:60:9a:f2:64:b0:47:f7:69:8d:15: 98:3a:10:68:a0:8b:68:02:ff:88:c7:8b:73:a1:7d:85:dc:f2: e5:29:60:52:2d:30:02:77:29:59:7d:78:8b:4d:5f:93:a8:de: 6a:54:4c:b6:c5:fa:ab:c8:e7:72:4b:fc:60:b4:f9:b8:0a:86: 0e:6d:f1:76:36:4d:66:31:be:0b:9f:fd:fb:7c:19:1a:fd:06: e9:1e:17:5c:cd:e7:7d:4e:7e:1d:7f:f8:97:23:54:ce:65:d9: d2:99:b6:f5:e8:ca:53:57:7a:3a:06:66:67:6b:f0:86:ff:85: 6c:e1:fa:bb:81:ea:8d:6e:9b:22:84:8d:b8:db:12:78:e5:80: 93:1e:96:16:ca:e8:eb:50:ac:9a:d9:8c:12:0c:24:b3:76:9b: 1a:02:25:1b:b6:f7:84:21:f5:b0:cb:66:7f:6b:03:de:02:f1: c1:e0:b6:e3:ee:73:a5:65:ec:90:3a:21:fc:92:af:09:f8:c5: 7d:1b:30:4d:05:75:e8:cd:0e:d0:63:d6:0f:b8:a6:b5:04:e2: 26:7f:7d:30 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUc6/93fcd4S4V7ZsCKWhiyKM4rUowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDI1MVoX DTI3MDMwMzA2MDc1MVowMzExMC8GA1UEAxMoN0JFNTI3MThDNEFBNTc0RTM5RTE1 M0NBM0E5NzQzQjk2OUQ5MEJGOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMJGdCqMmHLpEUk4Nm/iOrz77iIQeNNYia2KQCOo8omY8usAU0TRZv7FMzYq VeEjcDm4SUm/BZm3cu7ubj/3jaw+TVU/CG2CQc/KWovaP2Bzu1UQSAS/BcU/Q3Wx YRhLPq1JRkva9iOQwAqjTFMBt6yF3eV0rnHv//IvtkLdRRiyCTC/BjUSYqW4JlPT jNVkgdnB0BUQNdmeZPtGNY1+OHf8dcGP+P2WZbwsC/D9u3gH5/5N+yYZDJHLSkwi ud5NNdVnlj5f434DTx5P5SpgyHatfFsUKiNTtuE60VxdhjS/3rmslgcy4UeXCOeD +cPsXcgnRNpjwQ8KErXrsmxJk7kCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBR75ScY xKpXTjnhU8o6l0O5adkL+TAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0MzA1Ny5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK oZcwDQYJKoZIhvcNAQELBQADggEBAFk3mW0giA30wlOlPb/2Avf6P0yqEZpB5InN OXmknHCFkZo+jjrF7wwmEErKYJryZLBH92mNFZg6EGigi2gC/4jHi3OhfYXc8uUp YFItMAJ3KVl9eItNX5Oo3mpUTLbF+qvI53JL/GC0+bgKhg5t8XY2TWYxvguf/ft8 GRr9BukeF1zN531Ofh1/+JcjVM5l2dKZtvXoylNXejoGZmdr8Ib/hWzh+ruB6o1u myKEjbjbEnjlgJMelhbK6OtQrJrZjBIMJLN2mxoCJRu294Qh9bDLZn9rA94C8cHg tuPuc6Vl7JA6IfySrwn4xX0bME0FdejNDtBj1g+4prUE4iZ/fTA= -----END CERTIFICATE-----Generated at Sat Mar 28 11:44:02 2026 by rpki-client